CVE-2014-8744

Currently unrated 🤨

Key Information

Vendor: Drupal
Status: Nivo Slider
Vendor: CVE Published:; 13 October 2014

Summary

Cross-site scripting (XSS) vulnerability in the Nivo Slider module 7.x-2.x before 7.x-1.11 for Drupal allows remote authenticated users with the "administer nivo slider" permission to inject arbitrary web script or HTML via an image title.

Refferences

http://secunia.com/advisories/57459

third-party-advisoryx_refsource_SECUNIA

https://exchange.xforce.ibmcloud.com/vulnerabilities/92009

vdb-entryx_refsource_XF

https://www.drupal.org/node/2221481

x_refsource_MISC

https://www.drupal.org/node/2220545

x_refsource_CONFIRM

http://www.securityfocus.com/bid/66327

vdb-entryx_refsource_BID

Timeline

Vulnerability published
Oct 13, 2014
Vulnerability Reserved
Oct 13, 2014

Collectors

NVD DatabaseMitre Database